Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a66353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: LcKJxSuLJts3HnB/Ww3qGCuF6Vbp3+eRKpF8IIEAzz8=
Subject key identifier: 71:9C:A5:80:1A:BE:E2:43:1C:BC:47:31:04:0E:5D:8A:46:33:27:BF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0EEC0C2B3FF5ED53DB684353C66CA83F1695E55C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66353a3a2f34382d3438203d3e203539323832.roa
Signing time: Sun 13 Jul 2025 11:46:12 +0000
ROA not before: Sun 13 Jul 2025 11:41:12 +0000
ROA not after: Sun 12 Jul 2026 11:46:12 +0000
asID: 59282
IP address blocks: 2400:d680:f5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 20 Jul 2025 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ec:0c:2b:3f:f5:ed:53:db:68:43:53:c6:6c:a8:3f:16:95:e5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Jul 13 11:41:12 2025 GMT
Not After : Jul 12 11:46:12 2026 GMT
Subject: CN=719CA5801ABEE2431CBC4731040E5D8A463327BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:bc:17:7d:87:a6:fc:02:d2:bb:81:a6:d4:
47:c5:51:82:73:fd:17:8d:59:3b:0d:ba:ff:0c:d6:
5f:52:e5:76:cc:d4:8e:0c:8e:53:da:41:86:c6:b8:
ff:12:c8:87:02:b5:a1:08:d0:1d:c6:15:15:4b:c3:
59:b2:da:67:1d:12:53:23:28:82:85:ae:e3:0f:7c:
b0:03:e8:d9:bb:15:06:75:e9:55:4b:7e:81:d9:6d:
7d:1d:72:59:30:9b:ca:6b:b6:9e:70:98:83:31:37:
49:46:29:90:1d:0d:7a:05:cc:a2:fd:e1:27:c5:b6:
0a:c5:d8:bd:32:72:93:a5:5d:ac:5c:09:35:bb:73:
38:1f:51:21:f7:66:b7:80:bb:41:91:8a:9a:55:3d:
a6:4f:3d:92:74:23:92:f3:eb:13:f5:ad:ca:a9:96:
69:0e:d6:fd:43:38:92:a4:c5:ca:a0:01:c8:9d:2d:
dc:68:be:c3:94:43:5f:47:56:1b:95:10:c2:7d:bc:
ae:08:75:d6:c9:60:b3:67:45:c8:e3:e9:f5:c3:0e:
a6:6d:01:0e:aa:b7:43:c7:e1:6e:9c:dd:0f:f6:b7:
23:30:b6:be:53:4b:fa:95:20:5b:17:e8:99:f2:07:
31:7a:d8:b7:b0:2f:39:f9:1b:b2:f2:c0:46:c1:8f:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9C:A5:80:1A:BE:E2:43:1C:BC:47:31:04:0E:5D:8A:46:33:27:BF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:f5::/48
Signature Algorithm: sha256WithRSAEncryption
88:36:64:db:a9:50:b6:77:c7:0d:68:fc:80:38:b7:4e:9b:d1:
6d:ba:f3:07:30:75:b7:f7:7f:04:63:27:83:55:22:2a:d9:64:
b3:11:da:5c:19:be:9f:43:70:e6:e6:b5:8a:fb:19:de:d8:f3:
22:c2:ce:b2:fd:67:18:01:43:69:25:7e:26:d7:34:1d:f0:d0:
87:07:12:ac:9b:96:7c:27:b8:cd:5f:e6:2a:7e:94:25:d9:3d:
1e:57:73:68:a7:83:fb:3b:0c:3f:4a:c3:7d:eb:2c:63:49:fa:
ad:96:c1:44:e9:fd:8d:b3:10:47:e8:d3:3a:2c:a8:77:bc:4c:
4c:8a:10:3b:04:3d:51:13:d3:df:e2:e1:27:8a:f9:78:10:05:
f2:2a:a5:f5:a9:9a:53:cc:d7:6f:6d:cf:77:de:73:96:db:ed:
88:34:85:03:9c:88:6f:05:53:72:a8:b0:36:f9:8d:51:0b:1c:
ab:2a:51:ce:22:80:4c:fe:b2:16:c1:d0:a4:5a:a3:a4:c7:32:
da:ac:72:96:55:14:9e:cc:c2:5c:82:f3:a6:d4:43:d6:b1:1b:
21:79:e6:ef:80:35:1e:98:18:ae:bf:53:a2:1d:f7:9a:96:95:
30:f0:24:7d:fe:10:dd:1f:3d:ed:58:f1:f5:f8:e4:0c:d9:4d:
2c:ec:35:e2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUDuwMKz/17VPbaENTxmyoPxaV5VwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yNTA3MTMxMTQxMTJaFw0yNjA3MTIxMTQ2MTJaMDMxMTAvBgNV
BAMTKDcxOUNBNTgwMUFCRUUyNDMxQ0JDNDczMTA0MEU1RDhBNDYzMzI3QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGrwXfYem/ALSu4Gm1EfFUYJz
/ReNWTsNuv8M1l9S5XbM1I4MjlPaQYbGuP8SyIcCtaEI0B3GFRVLw1my2mcdElMj
KIKFruMPfLAD6Nm7FQZ16VVLfoHZbX0dclkwm8prtp5wmIMxN0lGKZAdDXoFzKL9
4SfFtgrF2L0ycpOlXaxcCTW7czgfUSH3ZreAu0GRippVPaZPPZJ0I5Lz6xP1rcqp
lmkO1v1DOJKkxcqgAcidLdxovsOUQ19HVhuVEMJ9vK4IddbJYLNnRcjj6fXDDqZt
AQ6qt0PH4W6c3Q/2tyMwtr5TS/qVIFsX6JnyBzF62LewLzn5G7LywEbBj9mHAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUcZylgBq+4kMcvEcxBA5dikYzJ78wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhNjYzNTNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAAPUw
DQYJKoZIhvcNAQELBQADggEBAIg2ZNupULZ3xw1o/IA4t06b0W268wcwdbf3fwRj
J4NVIirZZLMR2lwZvp9DcObmtYr7Gd7Y8yLCzrL9ZxgBQ2klfibXNB3w0IcHEqyb
lnwnuM1f5ip+lCXZPR5Xc2ing/s7DD9Kw33rLGNJ+q2WwUTp/Y2zEEfo0zosqHe8
TEyKEDsEPVET09/i4SeK+XgQBfIqpfWpmlPM129tz3fec5bb7Yg0hQOciG8FU3Ko
sDb5jVELHKsqUc4igEz+shbB0KRao6THMtqscpZVFJ7MwlyC86bUQ9axGyF55u+A
NR6YGK6/U6Id95qWlTDwJH3+EN0fPe1Y8fX45AzZTSzsNeI=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:07:15 2025 by rpki-client